Generated by JEB on 2019/08/01

PE: C:\Windows\System32\RpcEpMap.dll Base=0x180000000 SHA-256=5790D6821D9F8DD44F53F4DEDCF1C9F0746D890F14874BAA8B7239F64C13A0E2
PDB: RpcEpMap.pdb GUID={6C2E25EA-5447-77E2-F8E74D282A67433B} Age=1

599 located named symbols:
0x18000648C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000CF10: "__cdecl _imp_CreateThreadpoolWork" __imp_CreateThreadpoolWork
0x180012AB0: NtrbState
0x18000CD60: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x18000E830: "\RPC Control\DSEC" ??_C@_1CE@IMMKOAPG@?$AA?2?$AAR?$AAP?$AAC?$AA?5?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?2?$AAD?$AAS?$AAE?$AAC?$AA?$AA@
0x18000CFA8: "__cdecl _imp_AllocateAndInitializeSid" __imp_AllocateAndInitializeSid
0x180008830: ept_lookup_handle_t_rundown
0x180006040: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18000FC60: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180002740: GetEntriesNoLock
0x180008300: HPROCESS_rundown
0x180002080: ept_map
0x1800037D0: "public: unsigned short * __ptr64 __cdecl RPC_UUID::ConvertToString(unsigned short * __ptr64) __ptr64" ?ConvertToString@RPC_UUID@@QEAAPEAGPEAG@Z
0x180012438: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000CCD8: "__cdecl _imp__stricmp" __imp__stricmp
0x1800086C0: ept_inq_object
0x180014010: ext-ms-win-core-winrt-remote-l1-1-0_NULL_THUNK_DATA_DLA
0x18000CD98: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x18000D848: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x18000608C: "__cdecl CRT_INIT" _CRT_INIT
0x18000D630: "ext-ms-win-core-winrt-remote-l1-" ??_C@_1EI@DBNKCABH@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAc?$AAo?$AAr?$AAe?$AA?9?$AAw?$AAi?$AAn?$AAr?$AAt?$AA?9?$AAr?$AAe?$AAm?$AAo?$AAt?$AAe?$AA?9?$AAl?$AA1?$AA?9@
0x18000CE20: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18000CB98: "__cdecl _imp_NdrServerCallAll" __imp_NdrServerCallAll
0x18000CC58: "__cdecl _imp_RpcAsyncCompleteCall" __imp_RpcAsyncCompleteCall
0x180012AC0: NtrbTimeoutTimerTpEnvironment
0x18000D090: "__cdecl _imp_NtDeleteWnfStateData" __imp_NtDeleteWnfStateData
0x18000430C: NtrbpUnlinkQueueIfNecessary
0x18000D010: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x180012C80: "struct _SERVICE_STATUS g_ServiceStatus" ?g_ServiceStatus@@3U_SERVICE_STATUS@@A
0x18000D018: "__cdecl _imp_NtSetUuidSeed" __imp_NtSetUuidSeed
0x1800069E0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000CC08: "__cdecl _imp_RpcServerRegisterAuthInfoW" __imp_RpcServerRegisterAuthInfoW
0x18000303C: GetNewContext
0x180002230: ept_map_auth_sd
0x18000CD58: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x18000D058: "__cdecl _imp_RtlUnsubscribeWnfNotificationWaitForCompletion" __imp_RtlUnsubscribeWnfNotificationWaitForCompletion
0x180003CDC: NtrbpFindRequestQueue
0x1800042E0: NtrbpFree
0x180007F78: AllocatePort
0x18000D768: "unsigned short const * const HexDigits" ?HexDigits@@3QBGB
0x18000E640: "1f81d131-3fac-4537-9e0c-7e7b0c2f" ??_C@_1EK@LBCEHJEN@?$AA1?$AAf?$AA8?$AA1?$AAd?$AA1?$AA3?$AA1?$AA?9?$AA3?$AAf?$AAa?$AAc?$AA?9?$AA4?$AA5?$AA3?$AA7?$AA?9?$AA9?$AAe?$AA0?$AAc?$AA?9?$AA7?$AAe?$AA7?$AAb?$AA0?$AAc?$AA2?$AAf@
0x180012BA0: g_ulAdditionalProbeSize
0x180004830: GetEpMapRWLock
0x18000E858: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x18000D800: "34280" ??_C@_1M@FJGPNGEH@?$AA3?$AA4?$AA2?$AA8?$AA0?$AA?$AA@
0x180005EF0: AllocateReservedIPPort
0x1800053A4: GetEndpoint
0x18000FC88: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x18000CCF0: "__cdecl _imp__initterm_e" __imp__initterm_e
0x18000CC50: "__cdecl _imp_RpcServerUnregisterIf" __imp_RpcServerUnregisterIf
0x18000CB90: "__cdecl _imp_Ndr64AsyncServerCallAll" __imp_Ndr64AsyncServerCallAll
0x180012CB0: FWResetHappened
0x180008A60: RemoteFinishRPCDebugClientCallInfoEnumeration
0x180004004: UnLink
0x180004748: "public: void __cdecl RPC_SRWLOCK::Request(enum RPC_SRWLOCK::LockMode) __ptr64" ?Request@RPC_SRWLOCK@@QEAAXW4LockMode@1@@Z
0x18000FBB8: ext-ms-win-rpc-firewallportuse-l1-1-0_NULL_THUNK_DATA_DLB
0x18000D0C8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180006690: NdrServerCall2
0x18000D068: "__cdecl _imp_RtlInitializeSRWLock" __imp_RtlInitializeSRWLock
0x180009FA8: "void __cdecl InconsistencyDetected(struct _LIST_ENTRY * __ptr64,struct _LIST_ENTRY * __ptr64,struct _LIST_ENTRY * __ptr64,struct tagOpenedDbgSection * __ptr64,int)" ?InconsistencyDetected@@YAXPEAU_LIST_ENTRY@@00PEAUtagOpenedDbgSection@@H@Z
0x18000CE78: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x18000CC00: "__cdecl _imp_I_RpcServerRegisterForwardFunction" __imp_I_RpcServerRegisterForwardFunction
0x18000D8B0: "ncadg_at_ddp" ??_C@_1BK@FHMDCCNP@?$AAn?$AAc?$AAa?$AAd?$AAg?$AA_?$AAa?$AAt?$AA_?$AAd?$AAd?$AAp?$AA?$AA@
0x18000CF28: "__cdecl _imp_DecodePointer" __imp_DecodePointer
0x18000CC18: "__cdecl _imp_I_RpcServerInqLocalConnAddress" __imp_I_RpcServerInqLocalConnAddress
0x1800020E0: ept_map_auth
0x1800092A8: TranslateLocalCallTargetInfoToRemoteCallTargetInfo
0x18000CBF8: "__cdecl _imp_I_RpcServerSetAddressChangeFn" __imp_I_RpcServerSetAddressChangeFn
0x18000CBE0: "__cdecl _imp_I_RpcSystemFunction001" __imp_I_RpcSystemFunction001
0x18000CFC0: "__cdecl _imp_RegisterServiceCtrlHandlerExW" __imp_RegisterServiceCtrlHandlerExW
0x18000CF90: "__cdecl _imp_MakeSelfRelativeSD" __imp_MakeSelfRelativeSD
0x180008564: NewTower
0x18000D0D0: "__cdecl _xc_a" __xc_a
0x1800057F4: "void * __ptr64 __cdecl CreateNpSd(void)" ?CreateNpSd@@YAPEAXXZ
0x180003D4C: LogInterfaceRegister
0x18000E620: NAMED_PIPE_EVENT_GUID
0x18000CFD0: "__cdecl _imp_RtlAcquireSRWLockExclusive" __imp_RtlAcquireSRWLockExclusive
0x18000CEA8: "__cdecl _imp_GetComputerNameExW" __imp_GetComputerNameExW
0x18000D3D0: "I_RpcExtInitializeExtensionPoint" ??_C@_0CB@FAGACENF@I_RpcExtInitializeExtensionPoint@
0x18000CDD0: "__cdecl _imp_MapViewOfFileEx" __imp_MapViewOfFileEx
0x18000CD90: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x18000CF38: "__cdecl _imp_SetSecurityDescriptorOwner" __imp_SetSecurityDescriptorOwner
0x18000D348: ClientConnect
0x18000CBA8: "__cdecl _imp_RpcServerUseProtseqEpExW" __imp_RpcServerUseProtseqEpExW
0x180012440: GlobalIFOBJid
0x180008940: DbgThreadEnumHandle_rundown
0x180014028: ext-ms-win-rpc-firewallportuse-l1-1-0_NULL_THUNK_DATA_DLA
0x18000E7D0: ServiceTriggerPerfServiceTriggered
0x18000D230: "__cdecl _guard_iat_table" __guard_iat_table
0x1800068A8: memcpy
0x180009330: TranslateLocalClientCallInfoToRemoteClientCallInfo
0x18000CDC0: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x180008CF0: RemoteGetNextRPCDebugCallInfo
0x18000CCA8: "__cdecl _imp_memset" __imp_memset
0x18000D590: "System\CurrentControlSet\Service" ??_C@_1FA@NBFEJHFO@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x180006447: "__cdecl initterm" _initterm
0x180001980: ept_map_auth_async
0x180008290: GroupRegistrationCleanupCallback
0x180007D90: ReadRpcPolicy
0x18000FD64: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18000CE90: "__cdecl _imp_Sleep" __imp_Sleep
0x18000D0F0: "__cdecl _xi_z" __xi_z
0x18000CD38: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180012B20: RtdsTriggerUpdateLock
0x18000D7E8: "ncadg_ipx" ??_C@_1BE@LHBLLAHO@?$AAn?$AAc?$AAa?$AAd?$AAg?$AA_?$AAi?$AAp?$AAx?$AA?$AA@
0x180006080: "__cdecl _C_specific_handler" __C_specific_handler
0x180002E00: InitSD
0x1800042E0: MIDL_user_free
0x18000CF98: "__cdecl _imp_AddAccessAllowedAce" __imp_AddAccessAllowedAce
0x180012320: RtdsProviderWnfState
0x18000CD88: "__cdecl _imp_HeapFree" __imp_HeapFree
0x18000FBA0: ext-ms-win-core-winrt-remote-l1-1-0_NULL_THUNK_DATA_DLB
0x180001248: NtrbpAllocate
0x180001440: ept_delete_ex
0x180003AB4: CompletePendingEprRequests
0x180012A30: "__cdecl _hmod__ext_ms_win_core_winrt_remote_l1_1_0_dll" __hmod__ext_ms_win_core_winrt_remote_l1_1_0_dll
0x180012A90: NtrbUserCleanupRequest
0x18000D048: "__cdecl _imp_RtlAcquireSRWLockShared" __imp_RtlAcquireSRWLockShared
0x180008B10: RemoteFinishRPCDebugThreadInfoEnumeration
0x18000CD70: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18000CE68: "__cdecl _imp_InitializeCriticalSectionAndSpinCount" __imp_InitializeCriticalSectionAndSpinCount
0x18000CEB8: "__cdecl _imp_GlobalMemoryStatusEx" __imp_GlobalMemoryStatusEx
0x18000D8E8: "593" ??_C@_17JGBLHMKF@?$AA5?$AA9?$AA3?$AA?$AA@
0x18000CE40: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x1800068E4: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180009820: "long __cdecl GetNextRPCDebugCallInfo(void * __ptr64,struct tagDebugCallInfo * __ptr64 * __ptr64,struct tagDebugCellID * __ptr64,unsigned long * __ptr64)" ?GetNextRPCDebugCallInfo@@YAJPEAXPEAPEAUtagDebugCallInfo@@PEAUtagDebugCellID@@PEAK@Z
0x1800099CC: "long __cdecl GetNextRPCDebugEndpointInfo(void * __ptr64,struct tagDebugEndpointInfo * __ptr64 * __ptr64,struct tagDebugCellID * __ptr64,unsigned long * __ptr64)" ?GetNextRPCDebugEndpointInfo@@YAJPEAXPEAPEAUtagDebugEndpointInfo@@PEAUtagDebugCellID@@PEAK@Z
0x1800095BC: "void __cdecl CookupNodeId(unsigned char * __ptr64)" ?CookupNodeId@@YAXPEAE@Z
0x180004BAC: RpcExtFwManagerInit
0x180006790: IsResetIndicatedPortsInUsePresent
0x18000FD8C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x18000CF58: "__cdecl _imp_AllocateLocallyUniqueId" __imp_AllocateLocallyUniqueId
0x18000D858: "epmapper" ??_C@_1BC@PHFBHPP@?$AAe?$AAp?$AAm?$AAa?$AAp?$AAp?$AAe?$AAr?$AA?$AA@
0x18000E854: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x18000D060: "__cdecl _imp_RtlReleaseSRWLockExclusive" __imp_RtlReleaseSRWLockExclusive
0x180004268: NtrbpReleaseQueueRef
0x18000CF48: "__cdecl _imp_AccessCheck" __imp_AccessCheck
0x18000E6F8: "DgServerSupportOn" ??_C@_1CE@IGKPKPIG@?$AAD?$AAg?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAO?$AAn?$AA?$AA@
0x1800086C0: ept_insert
0x1800036E4: RtdspTriggerRegKeyExists
0x18000CEF0: "__cdecl _imp_CloseThreadpoolTimer" __imp_CloseThreadpoolTimer
0x1800053F0: CreateSd
0x18000E7B0: ServiceTriggerPerfServiceTimedOut
0x180008E80: RemoteGetNextRPCDebugEndpointInfo
0x18000D250: "ncacn_http" ??_C@_0L@KOPPEBEG@ncacn_http?$AA@
0x18000D098: "__cdecl _imp_RtlInitializeCriticalSection" __imp_RtlInitializeCriticalSection
0x18000A064: "long __cdecl OpenNextRPCServer(void * __ptr64,void * __ptr64 * __ptr64)" ?OpenNextRPCServer@@YAJPEAXPEAPEAX@Z
0x180009CB4: "long __cdecl OpenDbgSection(void * __ptr64 * __ptr64,void * __ptr64 * __ptr64,unsigned long,unsigned long * __ptr64)" ?OpenDbgSection@@YAJPEAPEAX0KPEAK@Z
0x1800094F0: LogEpmapDebugEvent
0x180005E88: RpcExtFWIndicatePortInUse
0x18000CFC8: api-ms-win-service-core-l1-1-0_NULL_THUNK_DATA
0x1800067F0: "__cdecl _tailMerge_ext_ms_win_rpc_firewallportuse_l1_1_0_dll" __tailMerge_ext_ms_win_rpc_firewallportuse_l1_1_0_dll
0x18000CE60: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180006340: "__cdecl decode_pointer" _decode_pointer
0x18000CE58: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180004E20: "public: __cdecl DLL::DLL(unsigned short * __ptr64,long * __ptr64) __ptr64" ??0DLL@@QEAA@PEAGPEAJ@Z
0x18000FD78: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-util-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-util-l1-1-0
0x18000D038: "__cdecl _imp_RtlReleaseSRWLockShared" __imp_RtlReleaseSRWLockShared
0x18000CD48: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18000CED0: "__cdecl _imp_CreateThreadpoolCleanupGroup" __imp_CreateThreadpoolCleanupGroup
0x18000CCD0: "__cdecl _imp_atoi" __imp_atoi
0x180012DF4: "enum FwManagerExtensionState gFwManagerExtensionState" ?gFwManagerExtensionState@@3W4FwManagerExtensionState@@A
0x18000CDE0: "__cdecl _imp_VirtualFree" __imp_VirtualFree
0x18000D568: "ListenOnInternet" ??_C@_1CC@BMGLEIAF@?$AAL?$AAi?$AAs?$AAt?$AAe?$AAn?$AAO?$AAn?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAe?$AAt?$AA?$AA@
0x18000CE10: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000D460: "Global\SC_AutoStartComplete" ??_C@_1DI@CLPFADAL@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?2?$AAS?$AAC?$AA_?$AAA?$AAu?$AAt?$AAo?$AAS?$AAt?$AAa?$AAr?$AAt?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x180014008: "__cdecl _imp_RemoteWinRTActivation" __imp_RemoteWinRTActivation
0x18000CCC8: "__cdecl _imp_strncmp" __imp_strncmp
0x180006454: DllMain
0x1800087F0: ept_lookup_handle_free
0x18000CF30: api-ms-win-core-util-l1-1-0_NULL_THUNK_DATA
0x18000673C: IsRemoteWinRTActivationPresent
0x180006948: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x18000CCC0: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x18000D700: EpmapDebugEvent
0x18000CF70: "__cdecl _imp_IsValidSid" __imp_IsValidSid
0x18000CCE0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18000CFE8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000CDC8: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1800061B4: "__cdecl _DllMainCRTStartup" __DllMainCRTStartup
0x18000D260: "ncacn_ip_tcp" ??_C@_0N@MGMDPLBF@ncacn_ip_tcp?$AA@
0x180004350: McTemplateU0zz
0x180004EA0: InitializeEndpointManager
0x18000CD30: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180006314: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180012470: EPMAllowAnonymous
0x1800068C0: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180012C40: UuidCritSec
0x1800047E0: GroupRegistrationStateChangeCallback
0x18000A7C0: "long __cdecl StartServerEnumeration(void * __ptr64 * __ptr64)" ?StartServerEnumeration@@YAJPEAPEAX@Z
0x180005280: UseProtseqIfNecessary
0x180004840: GetRWLockNumOfProcessors
0x18000CCB0: "__cdecl _imp_memcmp" __imp_memcmp
0x180002D00: AddToSavedContext
0x180006680: Ndr64AsyncServerCallAll
0x18000D3B0: "RemoteRpcDll" ??_C@_1BK@CEOEAFD@?$AAR?$AAe?$AAm?$AAo?$AAt?$AAe?$AAR?$AAp?$AAc?$AAD?$AAl?$AAl?$AA?$AA@
0x1800097C4: "struct tagDebugCellUnion * __ptr64 __cdecl GetCellByDebugCellID(void * __ptr64,struct tagDebugCellID)" ?GetCellByDebugCellID@@YAPEAUtagDebugCellUnion@@PEAXUtagDebugCellID@@@Z
0x18000E690: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x180012390: EndpointTriggerGuid_Context
0x18000FDF0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x18000CDF8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180004094: DeletePSEPNodeList
0x18000E854: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x18000CBF0: "__cdecl _imp_RpcServerRegisterIf3" __imp_RpcServerRegisterIf3
0x180004710: "public: void __cdecl RPC_SRWLOCK::Clear(enum RPC_SRWLOCK::LockMode) __ptr64" ?Clear@RPC_SRWLOCK@@QEAAXW4LockMode@1@@Z
0x180012CA0: g_hSC_AutoStartComplete
0x180006660: NdrAsyncServerCall
0x1800088D0: DbgClientCallEnumHandle_rundown
0x18000FCD8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180006790: IsIndicatePortInUsePresent
0x180009DB0: "void __cdecl CloseRPCServerDebugInfo(void * __ptr64 * __ptr64)" ?CloseRPCServerDebugInfo@@YAXPEAPEAX@Z
0x180012A60: NtrbRequestQueuesLock
0x18000D280: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x18000CD78: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x18000CDA8: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180004440: WildCardMatch
0x18000FAD4: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180003C28: NtrbDequeueRequest
0x180006170: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180006670: NdrServerCallAll
0x18000CCF8: "__cdecl _imp__initterm" __imp__initterm
0x18000AAF0: NtrbpRequestQueueTimeoutCallback
0x180014018: "__cdecl _imp_IndicatePortInUse" __imp_IndicatePortInUse
0x18000D600: "__cdecl _sz_ext_ms_win_core_winrt_remote_l1_1_0_dll" __sz_ext_ms_win_core_winrt_remote_l1_1_0_dll
0x18000CC70: "__cdecl _imp_RpcImpersonateClient" __imp_RpcImpersonateClient
0x18000CD28: "__cdecl _imp_SetLastError" __imp_SetLastError
0x18000FDDC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x18000CF68: "__cdecl _imp_IsValidSecurityDescriptor" __imp_IsValidSecurityDescriptor
0x18000CD00: api-ms-win-core-crt-l2-1-0_NULL_THUNK_DATA
0x180005AF0: "unsigned char __cdecl getMacAddress(unsigned char * __ptr64)" ?getMacAddress@@YAEPEAE@Z
0x180005D3C: NdisEnumerateInterfaces
0x18000FCEC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x18000CD50: "__cdecl _imp_GetDiskFreeSpaceW" __imp_GetDiskFreeSpaceW
0x180009E1C: "void __cdecl FinishRPCSystemWideCellEnumeration(void * __ptr64 * __ptr64)" ?FinishRPCSystemWideCellEnumeration@@YAXPEAPEAX@Z
0x18000CBE8: "__cdecl _imp_RpcServerRegisterIf2" __imp_RpcServerRegisterIf2
0x180012000: "struct PROTSEQ_INFO * gaProtseqInfo" ?gaProtseqInfo@@3PAUPROTSEQ_INFO@@A
0x18000CF78: "__cdecl _imp_InitializeSecurityDescriptor" __imp_InitializeSecurityDescriptor
0x18000CFF8: "__cdecl _imp_RtlIntegerToUnicodeString" __imp_RtlIntegerToUnicodeString
0x180003170: RtdspBuildKeyString
0x18000D538: SERVICE_TRIGGER_PERF_EVENT_GUID
0x18000D0C0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000D870: "ncacn_at_dsp" ??_C@_1BK@FAFHKOIC@?$AAn?$AAc?$AAa?$AAc?$AAn?$AA_?$AAa?$AAt?$AA_?$AAd?$AAs?$AAp?$AA?$AA@
0x18000CCE8: api-ms-win-core-crt-l1-1-0_NULL_THUNK_DATA
0x18000CE18: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180003A70: CompleteDelayedUseProtseqs
0x18000CF08: "__cdecl _imp_CreateThreadpoolTimer" __imp_CreateThreadpoolTimer
0x180005970: UpdateAddresses
0x18000D798: "ncacn_dnet_nsp" ??_C@_1BO@FDGJBNIP@?$AAn?$AAc?$AAa?$AAc?$AAn?$AA_?$AAd?$AAn?$AAe?$AAt?$AA_?$AAn?$AAs?$AAp?$AA?$AA@
0x180003450: StringCchCatExW
0x18000D4A0: "Software\Microsoft\Windows\Curre" ??_C@_1JC@JHIPFBHA@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x18000D020: "__cdecl _imp_EtwEventRegister" __imp_EtwEventRegister
0x1800049F0: "void __cdecl ServiceMain(unsigned long,unsigned short * __ptr64 * __ptr64)" ?ServiceMain@@YAXKPEAPEAG@Z
0x18000CFF0: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x18000D400: "Software\Microsoft\Rpc\Extension" ??_C@_1EE@NHDIJBBP@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAR?$AAp?$AAc?$AA?2?$AAE?$AAx?$AAt?$AAe?$AAn?$AAs?$AAi?$AAo?$AAn@
0x18000AAC0: "public: void * __ptr64 __cdecl DLL::`scalar deleting destructor'(unsigned int) __ptr64" ??_GDLL@@QEAAPEAXI@Z
0x180004690: CompareAsyncEprRequests
0x180003760: CreateIfIdString
0x180012A88: NtrbUserCompareRequestIds
0x180012A98: NtrbRequestTimeoutLength
0x180004608: "int __cdecl IsEpmapEventEnabled(struct _EVENT_DESCRIPTOR * __ptr64)" ?IsEpmapEventEnabled@@YAHPEAU_EVENT_DESCRIPTOR@@@Z
0x18000CEC8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000D0E8: "__cdecl _xi_a" __xi_a
0x18000CC30: "__cdecl _imp_I_RpcBindingInqTransportType" __imp_I_RpcBindingInqTransportType
0x18000CEC0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18000CD18: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180001368: CleanupIFOBJNode
0x180012DC0: pFreeInternetPortsTail
0x180004204: NtrbpCancelRequestQueueTimer
0x18000D080: "__cdecl _imp_RtlSubscribeWnfStateChangeNotification" __imp_RtlSubscribeWnfStateChangeNotification
0x180004144: NtrbpRemoveNextRequestFromQueue
0x18000CFB0: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180008FC0: RemoteOpenRPCDebugCallInfoEnumeration
0x18000669C: "__cdecl _imp_load_RemoteWinRTActivation" __imp_load_RemoteWinRTActivation
0x180009F14: "long __cdecl GetNextRPCSystemWideCell(void * __ptr64,struct tagDebugCellUnion * __ptr64 * __ptr64,struct tagDebugCellID * __ptr64,unsigned long * __ptr64)" ?GetNextRPCSystemWideCell@@YAJPEAXPEAPEAUtagDebugCellUnion@@PEAUtagDebugCellID@@PEAK@Z
0x18000D338: EpmapInterfaceUnregisterEvent
0x18000E638: Microsoft_Windows_ServiceTriggerPerfEventProviderKeywords
0x18000CC28: "__cdecl _imp_UuidIsNil" __imp_UuidIsNil
0x18000D680: "ext-ms-win-rpc-firewallportuse-l" ??_C@_1EM@JPMBIKNF@?$AAe?$AAx?$AAt?$AA?9?$AAm?$AAs?$AA?9?$AAw?$AAi?$AAn?$AA?9?$AAr?$AAp?$AAc?$AA?9?$AAf?$AAi?$AAr?$AAe?$AAw?$AAa?$AAl?$AAl?$AAp?$AAo?$AAr?$AAt?$AAu?$AAs?$AAe?$AA?9?$AAl@
0x180008AD0: RemoteFinishRPCDebugEndpointInfoEnumeration
0x1800043E8: McGenEventWrite
0x18000D788: Microsoft_Windows_EndpointTriggerProviderKeywords
0x18000FD14: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18000D890: "Endpoint Mapper" ??_C@_1CA@FFKDHCME@?$AAE?$AAn?$AAd?$AAp?$AAo?$AAi?$AAn?$AAt?$AA?5?$AAM?$AAa?$AAp?$AAp?$AAe?$AAr?$AA?$AA@
0x180008110: GetForwardEp
0x18000CDF0: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x180012458: MgmtIf
0x180012C20: hEpMapperHeap
0x18000CC10: "__cdecl _imp_RpcRaiseException" __imp_RpcRaiseException
0x18000CBC8: "__cdecl _imp_RpcRevertToSelfEx" __imp_RpcRevertToSelfEx
0x18000CBD0: "__cdecl _imp_I_RpcServerCheckClientRestriction" __imp_I_RpcServerCheckClientRestriction
0x180009AC4: "long __cdecl OpenRPCDebugCallInfoEnumeration(unsigned long,unsigned long,int,unsigned long,void * __ptr64 * __ptr64)" ?OpenRPCDebugCallInfoEnumeration@@YAJKKHKPEAPEAX@Z
0x18000D7C0: "ncacn_ip_tcp" ??_C@_1BK@BPGFLIHL@?$AAn?$AAc?$AAa?$AAc?$AAn?$AA_?$AAi?$AAp?$AA_?$AAt?$AAc?$AAp?$AA?$AA@
0x1800042E0: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x1800067E4: "__cdecl _imp_load_ResetIndicatedPortsInUse" __imp_load_ResetIndicatedPortsInUse
0x180012BC0: PortLock
0x180007E60: SqmUploadMachineConfig
0x18000686F: "__cdecl _imp_load_IndicatePortInUse" __imp_load_IndicatePortInUse
0x18000CF20: "__cdecl _imp_EncodePointer" __imp_EncodePointer
0x18000FCB0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x1800062F0: "__cdecl _security_check_cookie" __security_check_cookie
0x18000D0E0: "__cdecl _xc_z" __xc_z
0x18000CE28: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18000CDB8: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x18000CEE0: "__cdecl _imp_WaitForThreadpoolWorkCallbacks" __imp_WaitForThreadpoolWorkCallbacks
0x18000D810: "ncacn_np" ??_C@_1BC@CCHMBIKG@?$AAn?$AAc?$AAa?$AAc?$AAn?$AA_?$AAn?$AAp?$AA?$AA@
0x180009248: TranslateLocalCallInfoToRemoteCallInfo
0x1800093C8: TranslateLocalEndpointInfoToRemoteEndpointInfo
0x1800011D0: NtrbpAddRequestToQueue
0x18000CDA0: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x1800047B0: LocalEpmpSecurityCallback
0x18000CEB0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800088D0: DbgCallEnumHandle_rundown
0x180006000: OpenEndpointMapper
0x180012AB8: NtrbTimeoutTimerCleanupGroup
0x18000CD08: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180012C70: g_fOpenEpmpInterface
0x18000D0A0: "__cdecl _imp_WinSqmIsOptedIn" __imp_WinSqmIsOptedIn
0x18000CD80: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x180012E04: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUikxUifmgrnvUhszivwUwzbglmzUlyquivUznwGEUkivxlnkOlyq@shared" __@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUikxUifmgrnvUhszivwUwzbglmzUlyquivUznwGEUkivxlnkOlyq@shared
0x18000CFB8: "__cdecl _imp_SetServiceStatus" __imp_SetServiceStatus
0x18000CEE8: "__cdecl _imp_CloseThreadpoolWork" __imp_CloseThreadpoolWork
0x18000E6A0: "Software\Microsoft\Rpc" ??_C@_1CO@COHIJEAK@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAR?$AAp?$AAc?$AA?$AA@
0x18000CDE8: "__cdecl _imp_UnmapViewOfFile" __imp_UnmapViewOfFile
0x18000D030: "__cdecl _imp_EtwEventEnabled" __imp_EtwEventEnabled
0x180012CB8: g_EpmapEtwHandle
0x1800010F0: NtrbpCreateRequestQueue
0x180012488: "__cdecl _dllonexit_data" __dllonexit_data
0x18000CF18: api-ms-win-core-threadpool-l1-2-0_NULL_THUNK_DATA
0x180001764: ept_delete_ex_helper
0x1800019E0: ept_insert_ex
0x18000CBD8: "__cdecl _imp_I_RpcGetPortAllocationData" __imp_I_RpcGetPortAllocationData
0x18000E720: "Software\Policies\Microsoft\Wind" ??_C@_1FG@EGMNBABE@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x180012A40: "__cdecl _hmod__ext_ms_win_rpc_firewallportuse_l1_1_0_dll" __hmod__ext_ms_win_rpc_firewallportuse_l1_1_0_dll
0x18000FDC8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-apiquery-l1-1-0
0x18000CE38: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180012B80: RtdsTriggerDbList
0x180001270: GetEntries
0x18000D0F8: "__cdecl _guard_fids_table" __guard_fids_table
0x1800083BC: InitializeAllowAnonymousEPMStateIfNecessary
0x18000B150: "__cdecl load_config_used" _load_config_used
0x180008070: CleanupBufferedAsyncEprRequest
0x180009758: "long __cdecl GetCellByDebugCellID(unsigned long,struct tagDebugCellID,struct tagDebugCellUnion * __ptr64)" ?GetCellByDebugCellID@@YAJKUtagDebugCellID@@PEAUtagDebugCellUnion@@@Z
0x18000D448: "rpcrt4.dll" ??_C@_1BG@OHPGIPDH@?$AAr?$AAp?$AAc?$AAr?$AAt?$AA4?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180008970: DebugServerSecurityCallback
0x1800123E0: SERVICE_TRIGGER_PERF_EVENT_GUID_Context
0x18000CD20: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x18000CD10: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180003098: RtdsTriggerExists
0x180012C74: cTotalEpEntries
0x180012DF8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUikxUifmgrnvUwytoryUwzbglmzUlyquivUznwGEUkivxlnkOlyq@RpcDbg" __@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUikxUifmgrnvUwytoryUwzbglmzUlyquivUznwGEUkivxlnkOlyq@RpcDbg
0x18000E7E0: "RpcTimeout" ??_C@_1BG@NBBJOPOF@?$AAR?$AAp?$AAc?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x180009C30: "long __cdecl OpenRPCDebugThreadInfoEnumeration(unsigned long,unsigned long,void * __ptr64 * __ptr64)" ?OpenRPCDebugThreadInfoEnumeration@@YAJKKPEAPEAX@Z
0x180005094: StartEndpointMapper
0x18000FCC4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x180003A20: GetCurrentUserToken
0x180009E64: "struct tagDebugCellUnion * __ptr64 __cdecl GetNextDebugCellInfo(void * __ptr64,struct tagDebugCellID * __ptr64)" ?GetNextDebugCellInfo@@YAPEAUtagDebugCellUnion@@PEAXPEAUtagDebugCellID@@@Z
0x18000A914: "void __cdecl GenerateSectionName(unsigned short * __ptr64,int,unsigned long,unsigned long * __ptr64)" ?GenerateSectionName@@YAXPEAGHKPEAK@Z
0x18000CE70: "__cdecl _imp_OpenEventW" __imp_OpenEventW
0x180009454: "void __cdecl LogpInterfaceEvent(struct _GUID * __ptr64,struct _GUID * __ptr64,char * __ptr64,char * __ptr64,struct _EVENT_DESCRIPTOR * __ptr64)" ?LogpInterfaceEvent@@YAXPEAU_GUID@@0PEAD1PEAU_EVENT_DESCRIPTOR@@@Z
0x18000CC88: "__cdecl _imp_RpcServerInqCallAttributesW" __imp_RpcServerInqCallAttributesW
0x18000D0B0: "__cdecl _imp_RtlGetNtProductType" __imp_RtlGetNtProductType
0x18000D5E8: "\\.\NDIS" ??_C@_1BC@JMINEEFF@?$AA?2?$AA?2?$AA?4?$AA?2?$AAN?$AAD?$AAI?$AAS?$AA?$AA@
0x18000D548: EndpointTriggerGuid
0x180008F10: RemoteGetNextRPCDebugThreadInfo
0x18000CDB0: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800044C0: MatchPSAndEP
0x18000CFE0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000CC20: "__cdecl _imp_I_RpcServerInqRemoteConnAddress" __imp_I_RpcServerInqRemoteConnAddress
0x18000CE30: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180012DD0: pFreeIntranetPortsTail
0x180012CC0: "struct _RPC_EXTENSION_POINT_ENTRY * g_ExtensionPoints" ?g_ExtensionPoints@@3PAU_RPC_EXTENSION_POINT_ENTRY@@A
0x18000CBB0: "__cdecl _imp_RpcMgmtSetServerStackSize" __imp_RpcMgmtSetServerStackSize
0x18000403C: FindPSEP
0x18000CBC0: "__cdecl _imp_RpcMgmtIsServerListening" __imp_RpcMgmtIsServerListening
0x18000CED8: "__cdecl _imp_SubmitThreadpoolWork" __imp_SubmitThreadpoolWork
0x180014000: "__cdecl _imp_GetLocalEndPointMapperCrossVmPipeName" __imp_GetLocalEndPointMapperCrossVmPipeName
0x18000CDD8: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x180006890: ApiSetQueryApiSetPresence
0x180006350: "__cdecl encoded_null" _encoded_null
0x18000CF88: "__cdecl _imp_SetSecurityDescriptorGroup" __imp_SetSecurityDescriptorGroup
0x18000CC60: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x180004C40: RpcpInitializeExtension
0x18000D290: RTDS_TRIGGER_KEY
0x18000CFD8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x18000E858: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180004CE8: "long __cdecl RpcpLoadExtensionDll(enum RPC_EXTENSION_POINT_TYPE,unsigned short const * __ptr64,void * __ptr64,class DLL * __ptr64 * __ptr64)" ?RpcpLoadExtensionDll@@YAJW4RPC_EXTENSION_POINT_TYPE@@PEBGPEAXPEAPEAVDLL@@@Z
0x18000CBA0: "__cdecl _imp_NdrAsyncServerCall" __imp_NdrAsyncServerCall
0x180004520: MIDL_user_allocate
0x180006480: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000689C: memcmp
0x180012CA8: "class RPC_SRWLOCK EpMapRWLock" ?EpMapRWLock@@3VRPC_SRWLOCK@@A
0x18000D558: EpmapEtwGuid
0x18000D828: "\pipe\epmapper" ??_C@_1BO@NICHNMAK@?$AA?2?$AAp?$AAi?$AAp?$AAe?$AA?2?$AAe?$AAp?$AAm?$AAa?$AAp?$AAp?$AAe?$AAr?$AA?$AA@
0x180012D80: Microsoft_Windows_EndpointTriggerProviderEnableBits
0x180001014: NtrbEnqueueRequest
0x180008D80: RemoteGetNextRPCDebugClientCallInfo
0x18000A728: "long __cdecl OpenRPCSystemWideCellEnumeration(void * __ptr64 * __ptr64)" ?OpenRPCSystemWideCellEnumeration@@YAJPEAPEAX@Z
0x18000D328: EpmapInterfaceRegisterEvent
0x180012DE0: LocalNullUuid
0x18000D5E0: WNF_RPCF_FWMAN_RUNNING
0x1800086E0: ept_lookup
0x18000CC40: "__cdecl _imp_TowerExplode" __imp_TowerExplode
0x18000FC9C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x18000D088: "__cdecl _imp_RtlUnsubscribeWnfStateChangeNotification" __imp_RtlUnsubscribeWnfStateChangeNotification
0x18000CBB8: "__cdecl _imp_RpcServerListen" __imp_RpcServerListen
0x180002FD0: GetProtseqIdAnsi
0x1800091C0: RemoteOpenRPCDebugThreadInfoEnumeration
0x180012DFC: "int g_fDbgLibInitialized" ?g_fDbgLibInitialized@@3HA
0x180012D84: "int fListenOnInternet" ?fListenOnInternet@@3HA
0x180003FA4: LogInterfaceUnregister
0x18000643B: "__cdecl initterm_e" _initterm_e
0x18000D078: "__cdecl _imp_RtlImageNtHeader" __imp_RtlImageNtHeader
0x180012D40: Microsoft_Windows_ServiceTriggerPerfEventProviderEnableBits
0x18000D0B8: ntdll_NULL_THUNK_DATA
0x18000CCB8: "__cdecl _imp_memcpy" __imp_memcpy
0x180012450: "unsigned int gNumberOfProcessors" ?gNumberOfProcessors@@3IA
0x1800035B4: StringCchCopyExW
0x1800066A8: "__cdecl _tailMerge_ext_ms_win_core_winrt_remote_l1_1_0_dll" __tailMerge_ext_ms_win_core_winrt_remote_l1_1_0_dll
0x18000CF80: "__cdecl _imp_FreeSid" __imp_FreeSid
0x18000D040: "__cdecl _imp_EtwEventWriteTransfer" __imp_EtwEventWriteTransfer
0x18000FD3C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x18000E778: "AllowAnonymousAccessToEPM" ??_C@_1DE@KLIHMCAA@?$AAA?$AAl?$AAl?$AAo?$AAw?$AAA?$AAn?$AAo?$AAn?$AAy?$AAm?$AAo?$AAu?$AAs?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAT?$AAo?$AAE?$AAP?$AAM?$AA?$AA@
0x18000CF00: "__cdecl _imp_SetThreadpoolTimer" __imp_SetThreadpoolTimer
0x180012DD8: pFreeIntranetPorts
0x18000CC98: "__cdecl _imp_ApiSetQueryApiSetPresence" __imp_ApiSetQueryApiSetPresence
0x180012430: "__cdecl _security_cookie" __security_cookie
0x180005020: RtdsReaderInitialize
0x1800041B0: NtrbpDestroyRequestQueue
0x180009B74: "long __cdecl OpenRPCDebugEndpointInfoEnumeration(char * __ptr64,void * __ptr64 * __ptr64)" ?OpenRPCDebugEndpointInfoEnumeration@@YAJPEADPEAPEAX@Z
0x18000CF60: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x18000CEF8: "__cdecl _imp_WaitForThreadpoolTimerCallbacks" __imp_WaitForThreadpoolTimerCallbacks
0x1800040C8: UnLinkFromIFOBJList
0x180002EF0: GetEntriesFromSavedContext
0x1800098E4: "long __cdecl GetNextRPCDebugClientCallInfo(void * __ptr64,struct tagDebugClientCallInfo * __ptr64 * __ptr64,struct tagDebugCallTargetInfo * __ptr64 * __ptr64,struct tagDebugCellID * __ptr64,unsigned long * __ptr64)" ?GetNextRPCDebugClientCallInfo@@YAJPEAXPEAPEAUtagDebugClientCallInfo@@PEAPEAUtagDebugCallTargetInfo@@PEAUtagDebugCellID@@PEAK@Z
0x18000CD68: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18000D0A8: "__cdecl _imp_WinSqmSetDWORD" __imp_WinSqmSetDWORD
0x18000D7E0: "135" ??_C@_17JGKBAOOF@?$AA1?$AA3?$AA5?$AA?$AA@
0x18000D008: "__cdecl _imp_NtOpenSection" __imp_NtOpenSection
0x18000CFA0: "__cdecl _imp_GetLengthSid" __imp_GetLengthSid
0x1800086C0: ept_delete
0x18000FC74: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180005F64: PurgeOldEntries
0x180004940: McGenControlCallbackV2
0x180004AD4: "void __cdecl UpdateState(unsigned long)" ?UpdateState@@YAXK@Z
0x18000D360: "bc90d167-9470-4139-a9ba-be0bbbf5" ??_C@_1EK@KPHNJPMN@?$AAb?$AAc?$AA9?$AA0?$AAd?$AA1?$AA6?$AA7?$AA?9?$AA9?$AA4?$AA7?$AA0?$AA?9?$AA4?$AA1?$AA3?$AA9?$AA?9?$AAa?$AA9?$AAb?$AAa?$AA?9?$AAb?$AAe?$AA0?$AAb?$AAb?$AAb?$AAf?$AA5@
0x18000E7F8: "c:\" ??_C@_17OAIDBDBP@?$AAc?$AA?3?$AA?2?$AA?$AA@
0x18000FC38: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-crt-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-crt-l2-1-0
0x180004550: SearchIFObjNode
0x18000CC68: "__cdecl _imp_I_RpcFree" __imp_I_RpcFree
0x18000FAB4: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_rpc_firewallportuse_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_rpc_firewallportuse_l1_1_0_dll
0x180008600: SetRestrictRemoteClients
0x18000CC48: "__cdecl _imp_I_RpcBindingIsClientLocal" __imp_I_RpcBindingIsClientLocal
0x18000CC80: "__cdecl _imp_I_RpcAllocate" __imp_I_RpcAllocate
0x18000D240: "ncacn_np" ??_C@_08KIIIGFJO@ncacn_np?$AA@
0x18000CC78: "__cdecl _imp_RpcRevertToSelf" __imp_RpcRevertToSelf
0x18000D000: "__cdecl _imp_DbgPrint" __imp_DbgPrint
0x18000CD40: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000CE08: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x18000E630: Microsoft_Windows_ServiceTriggerPerfEventProviderLevels
0x18000D270: RPC_INTERFACE_EVENT_GUID
0x1800059A0: DealWithDeviceEvent
0x180004B30: "long __cdecl InitializeService(void)" ?InitializeService@@YAJXZ
0x1800085B8: RtlStringCbCopyA
0x18000CE48: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180004780: RemoteEpmpServerSecurityCallback
0x18000D790: Microsoft_Windows_EndpointTriggerProviderLevels
0x180006360: "__cdecl _security_init_cookie" __security_init_cookie
0x18000FB20: ext-ms-win-rpc-firewallportuse-l1-1-0_NULL_THUNK_DATA_DLN
0x18000FA94: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_core_winrt_remote_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_core_winrt_remote_l1_1_0_dll
0x18000FDA0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0
0x18000E800: "RPCDBGLIG: NtQuerySystemInformat" ??_C@_0DA@OAKCPOPL@RPCDBGLIG?3?5NtQuerySystemInformat@
0x180003D9C: EnLinkOnIFOBJList
0x18000D050: "__cdecl _imp_NtQuerySystemInformation" __imp_NtQuerySystemInformation
0x18000CE50: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x1800089F0: RemoteFinishRPCDebugCallInfoEnumeration
0x18000CF50: "__cdecl _imp_SetSecurityDescriptorDacl" __imp_SetSecurityDescriptorDacl
0x180012AA0: NtrbRequestQueueListHead
0x180012C78: "struct SERVICE_STATUS_HANDLE__ * __ptr64 __ptr64 g_ServiceHandle" ?g_ServiceHandle@@3PEAUSERVICE_STATUS_HANDLE__@@EA
0x180005E38: InitializeLocks
0x180009A54: "long __cdecl GetNextRPCDebugThreadInfo(void * __ptr64,struct tagDebugThreadInfo * __ptr64 * __ptr64,struct tagDebugCellID * __ptr64,unsigned long * __ptr64)" ?GetNextRPCDebugThreadInfo@@YAJPEAXPEAPEAUtagDebugThreadInfo@@PEAUtagDebugCellID@@PEAK@Z
0x180004FFC: McGenEventRegister
0x18000FC24: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-crt-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-crt-l1-1-0
0x180004640: ExactMatch
0x18000CB88: "__cdecl _imp_UuidToStringW" __imp_UuidToStringW
0x18000D8D0: "ncacn_http" ??_C@_1BG@FOAHFCPJ@?$AAn?$AAc?$AAa?$AAc?$AAn?$AA_?$AAh?$AAt?$AAt?$AAp?$AA?$AA@
0x180005ECC: "long __cdecl RPC_STATUSFromHRESULT(long)" ?RPC_STATUSFromHRESULT@@YAJJ@Z
0x180008494: IsCurrentUserAdmin
0x180009AC4: "long __cdecl OpenRPCDebugClientCallInfoEnumeration(unsigned long,unsigned long,int,unsigned long,void * __ptr64 * __ptr64)" ?OpenRPCDebugClientCallInfoEnumeration@@YAJKKHKPEAPEAX@Z
0x180005B98: NdisQueryHwAddress
0x18000E6D0: "DgClientSupportOn" ??_C@_1CE@CLCJHLOP@?$AAD?$AAg?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AAS?$AAu?$AAp?$AAp?$AAo?$AAr?$AAt?$AAO?$AAn?$AA?$AA@
0x18000FC4C: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x18000CEA0: "__cdecl _imp_GetTickCount64" __imp_GetTickCount64
0x180003E30: FindIFOBJNode
0x18000CC90: RPCRT4_NULL_THUNK_DATA
0x180014020: "__cdecl _imp_ResetIndicatedPortsInUse" __imp_ResetIndicatedPortsInUse
0x1800064D0: "__cdecl _report_gsfailure" __report_gsfailure
0x180008B50: RemoteGetCellByDebugCellID
0x18000CCA0: api-ms-win-core-apiquery-l1-1-0_NULL_THUNK_DATA
0x18000D028: "__cdecl _imp_EtwEventWrite" __imp_EtwEventWrite
0x18000D070: "__cdecl _imp_NtOpenFile" __imp_NtOpenFile
0x18000D6D0: "__cdecl _sz_ext_ms_win_rpc_firewallportuse_l1_1_0_dll" __sz_ext_ms_win_rpc_firewallportuse_l1_1_0_dll
0x18000CE80: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x18000D7B8: "#69" ??_C@_17LCCEBGLI@?$AA?$CD?$AA6?$AA9?$AA?$AA@
0x180004850: ept_cleanup_handle_t_rundown
0x18000FD00: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x18000CE00: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x18000A0AC: "long __cdecl OpenRPCServerDebugInfo(unsigned long,void * __ptr64 * __ptr64)" ?OpenRPCServerDebugInfo@@YAJKPEAPEAX@Z
0x18000CF40: "__cdecl _imp_InitializeAcl" __imp_InitializeAcl
0x1800086C0: ept_mgmt_delete
0x180012C68: IFObjList
0x18000FD28: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x18000CC38: "__cdecl _imp_NdrServerCall2" __imp_NdrServerCall2
0x1800055EC: "int __cdecl CreateSids(void * __ptr64 * __ptr64,void * __ptr64 * __ptr64,void * __ptr64 * __ptr64,void * __ptr64 * __ptr64,void * __ptr64 * __ptr64,void * __ptr64 * __ptr64)" ?CreateSids@@YAHPEAPEAX00000@Z
0x18000FB08: ext-ms-win-core-winrt-remote-l1-1-0_NULL_THUNK_DATA_DLN
0x1800059E8: NtrbInitialize
0x18000E7C0: ServiceTriggerPerfServiceArrived
0x18000CE98: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180009100: RemoteOpenRPCDebugEndpointInfoEnumeration
0x180008910: DbgEndpointEnumHandle_rundown
0x18000FDB4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0
0x1800018C8: UpdateEpMapperPortsIfNecessary
0x180012C00: PortData
0x18000CE88: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180009060: RemoteOpenRPCDebugClientCallInfoEnumeration
0x1800095B0: "unsigned long __cdecl RpcEpMapServiceCtrlHandler(unsigned long,unsigned long,void * __ptr64,void * __ptr64)" ?RpcEpMapServiceCtrlHandler@@YAKKKPEAX0@Z
0x18000FD50: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180004820: ResetWithNoAuthException
0x180006727: "__cdecl _imp_load_GetLocalEndPointMapperCrossVmPipeName" __imp_load_GetLocalEndPointMapperCrossVmPipeName
0x180012DC8: pFreeInternetPorts
0x1800068B4: memset
0x18000FE04: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]